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□ 1. Document©: US 6826123 Bl 

Ll: Entry 1 of 6 File: USPT Nov 30, 2004 

US-PAT-NO: 6826123 

DOCUMENT-IDENTIFIER : US 6826123 Bl 

TITLE: Global recovery for time of day synchronization 
DATE-ISSUED: November 30, 2004 
I NVENTOR- I N FORMAT I ON : 

NAME CITY STATE ZIP CODE COUNTRY 

Herring; Jay R. Poughkeepsie NY 

US-CL-CURRENT: 368 /46; 368 /47, 375 / 356 , 709 /248, 713 / 375 , 713 / 400 



ABSTRACT : 

A system and method is provided for synchronizing time of day information between 
and among communication adapters. Time of day information, which is desired for 
proper message packet ordering and delivery, is recovered in a process in which a 
master adapter, connected to a master node, periodically broadcasts current time of 
day information to slave adapters which operate to determine whether or not drift 
correction is to be applied. 

1 Claims, 50 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 43 
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I NVENTOR- I N FORMAT I ON : 

NAME CITY STATE ZIP CODE COUNTRY 

Schulz; Jurgen M. Pleasanton CA 



US-CL-CURRENT: 326 /93; 326 / 136 , 327/ 141 



ABSTRACT : 



Various systems and methods for reducing the power consumption of CSRs (Control and 
Status Registers) within an integrated circuit (IC) are disclosed. In one 
embodiment, an IC includes a plurality of CSRs. Each CSR includes one or more flip- 
flops that are used to store one or more bits of control and/or status information 
for an associated device on the IC. The IC also includes one or more clock gates. 
Each clock gate is coupled to provide a gated clock signal to one or more of the 
flip-flops in a respective one of the CSRs. Each clock gate is configured to output 
a clock signal as the gated clock signal if a clock enable signal that corresponds 
to the respective CSR is asserted. The IC also includes one or more clock gating 
units that are each configured to generate the clock enable signal for a respective 
one of the CSRs. 



9 Claims, 6 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 5 
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US-CL-CURRENT: 717/171; 370/396, 709/215 
ABSTRACT : 

To provide an approach to software update with scaleable disturbance there is 
proposed a state copying method for a computation system with at least two logic 
partitions wherein a state of new software in a standby partition is updated to the 
state of old software in an executing partition while continuing execution of the 
old software. Data is transferred from the executing partition to the standby 
partition in a scaleable way and as soon as the same state is achieved for the 
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standby partition and the executing partition the execution is switched to the new, 
software. This provides a scaleable degree of disturbance due to the software 
update . 

29 Claims, 16 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 10 
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US -CL- CURRENT: 717 / 168 ; 707 /10, 707 / 104. 1 
ABSTRACT : 

To improve the efficiency for an update process in a software processing device 
with a plurality of memory partitions (4,14) it is proposed to continue the 
execution of old software on original data stored in a first memory partition (4) . 
In case the same state for data of old and new software is achieved (S4) an instant 
switch of services to the new software as far as the same state is achieved (S5) 
takes place. This processing is repeated (S6) until no data to be transferred 
remains (S6) in the first memory partition. Thus, the present invention allows for 
a considerable improvement of the update efficiency with reduced disturbances 
during data transfer. 

34 Claims, 10 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 10 
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DOCUMENT -IDENTIFIER : US 6021505 A 

TITLE: Method and apparatus for updating a timer from multiple timing domains 
DATE-ISSUED: February 1, 2000 



\ INVENTOR-INFORMATION: 
NAME 

Ayyagari; Bhuvaneshwari 
Raman; Rajesh 

US -CL- CURRENT: 713/502 



CITY 

San Jose 
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STATE ZIP CODE 

CA 

CA 



COUNTRY 



ABSTRACT : 

The present invention is a method and apparatus for updating a timer from a 
plurality of timing domains. An arbitration circuit arbitrates the update requests 
from the plurality of timing domains. The plurality of timing domains include at 
least a counter. The update requests provide the update values. A multiplexer , 
which is coupled to receive the update values , selects a timer value from the 
update values. A timer register which is coupled to the multiplexer stores the 
timer value synchronously with a local clock signal. 

29 Claims, 5 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets : 5 
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□ 6. Document ID: US 5901320 A 
Ll: Entry 6 of 6 

US-PAT-NO: 5901320 

DOCUMENT-IDENTIFIER: US 5901320 A 



File: USPT 



May 4, 1999 



TITLE: Communication system configured to enhance system reliability using special 
program version management 

DATE-ISSUED: May 4, 1999 



INVENTOR-INFORMATION : 
NAME 

Takahashi; Souichi 
Kobayashi ; Seiichi 
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US-CL-CURRENT: 717 / 170 ; 709 /223, 717/171, 717 / 173 
ABSTRACT : 

A communication system comprising a plurality of network elements and a monitoring 
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apparatus for centrally monitoring and controlling these network elements. Each of * 
the network elements has a plurality of CPU's and a flash memory for accommodating 
programs to be performed by the CPU's. The monitoring apparatus includes a 
database, a management unit and a transfer unit. The database retains a plurality 
of programs for each of the CPU's in each network element, and generic issues 
defined uniquely corresponding to combinations of versions of programs to be 
executed by each CPU. When the version of any program is changed, the management 
unit selects the program to be transferred in accordance with the applicable 
generic issue. The transfer unit transfers the program thus selected to the 
monitoring apparatus. 

20 Claims, 11 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 10 
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□ 1. Document ID: US 6892233 Bl 

L6: Entry 1 of 49 



File: USPT 



May 10, 2005 



US-PAT-NO: 6892233 

DOCUMENT- IDENTIFIER : US 6892233 Bl 

TITLE: Optical communication network and method of remotely managing multiplexers 
DATE-ISSUED: May 10, 2005 



INVENTOR-INFORMATION: 
NAME 

Christian; Philip J. 
Ramsden; Chris 



CITY 

Bishop's Stortford 
Hertford 



STATE ZIP CODE 



COUNTRY 

GB 

GB 



US-CL-CURRENT: 709/223; 709/221, 709/227, 709/228, 709/229, 709/230 
ABSTRACT : 

To provide a graphic user interface, supported by HTML or Java script, to a 
personal computer (102) for the control of SONET/SDH network elements (106), an RS- 
232 port "of a PC' is used to establish a PPP session to a remote access server, RAS 
(122) . The network element (106) is therefore configured to imitate a modem, and to 
route PPP packets into its related management system across an optical ring (12) . 
The management system may include an intermediate network manager (12 0) and a DHCP 
server (124) . Once legitimacy of the PC is established through the IP session, the 
PC is provided with an IP address to invoke the PC's IP stack. Subsequently, IP is 
communicated across the PPP session, with the RAS (120) configured to terminate the 
PPP session and forward IP packets into an IP network (128). IP packets (131), 
received at a web server (140), are converted into command line interface (CLI) 
messages 135 and are sent directly to the network manager (120) within an IP 
packet. The network manager (120) terminated the IP packet and re-packages the CLI 
messages into an optical carrier format (140) for relay to an addressed network 
element (106). The addressed network element (106), which is responsive to the CLI 
messages from a management perspective, then alters its set-up or functionality 
accordingly. Complex text-based CLI instructions are thus avoided by a field-based 
engineer through the use of a GUI supported by a PC having web-browser 
capabilities, with an typical architecture shown in FIG. 2. 

30 Claims, 4 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 4 
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US-PAT-NO: 6892230 
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TITLE: Dynamic self -configuration for ad hoc peer networking using mark-up language 
formated description messages 

DATE-ISSUED: May 10, 2005 



INVENTOR-INFORMATION: 



NAME 


CITY 


STATE 


Gu; Ye 


Seattle 


WA 


Ford; Peter S. 


Carnation 


WA 


Knight; Holly 


Woodinville 


WA 


Goland; Yaron Y. 


Redmond 


WA 


Leach; Paul J. 


Seattle 


WA 



ZIP CODE 



COUNTRY 



US-CL-CURRENT: 709 / 220 ; 370 / 254 , 713 /1 



ABSTRACT : 



A device control model provides an integrated set of addressing, naming, discovery 
and description processes that enables automatic, dynamic and ad-hoc self-setup by 
devices to interoperate with other devices on a network. This permits a computing 
device when introduced into a network to automatically configure so as to connect 
and interact with other computing devices available on the network, without a user 
installation experience and without downloading driver software or persisting a 
configuration setup for connecting and interacting with such other computing 
devices. Upon completing interaction with such other devices, the computing device 
automatically releases the setup for such other devices so as to avoid persistent 
device configurations that might create a configuration maintenance and management 
burden. 



18 Claims, 51 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 48 
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TITLE: Protected IP telephony calls using encryption 



http://westbrs:9000ftin/gate^^ 



5/15/05 



DATE-ISSUED: May 3, 2005 



I NVE NT OR -IN FORMAT I ON : 



NAME 


CITY 


STATE 


Kung; Fen-Chung 


Bridgewater 


NJ 


Russell; Jesse Eugene 


Piscataway 


NJ 


Walker; Hopeton 


Haledon 


NJ 


Wang; Spencer 


Parsippany 


NJ 
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US-CL-CURRENT: 713/153; 380/201, 380/202, 713/171 



ABSTRACT : 



Communication information transmitted in the broadband communication system may be 
in a packet format and secured using encryption techniques, for example encryption 
software, including a means for providing an initial security key and updated 
security keys to the various pieces of communication equipment located throughout 
the broadband communication system. When communication equipment, for example a 
gateway, is first registered with, for example, an IP central station, the IP 
central station assigns an initial encryption key to the gateway that is assigned 
and retained by a server, for example a call manager server, and the gateway (e.g., 
broadband residential gateway. This initial encryption key may be used to establish 
a secure two way communication between two pieces of communication equipment as an 
originating point communication equipment and a terminating point communication 
equipment . 

14 Claims, 10 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 10 
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L6: Entry 4 of 49 



File: USPT 
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US-PAT-NO: 6883034 

DOCUMENT-IDENTIFIER: US 6883034 Bl 

TITLE: Method of resolving conflicts in access control lists in router by comparing 
elements in the lists based on subsumption relations 

DATE-ISSUED: April 19, 2005 
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NAME 

Pelavin; Richard N. 
McGuire; James G. 
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CITY STATE 
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US-CL-CURRENT: 709/242; 370/351, 709/238 
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ABSTRACT : 



Methods are described for analyzing access list subsumption in routing devices of a 
computer network and for identifying computer network integrity violations, by 
producing structured data that includes stored router names and access lists that 
include elements with address/mask pairs, or patterns used to filter data into and 
out of a routing device, respectively; determining whether access lists in the 
structured data include elements in which a first element in the access list has a 
more general or equal address/mask pair, or pattern, respectively, than a second or 
subsequent element, or pattern; and storing in electronic memory a report of 
elements or a list of patterns, respectively, in which a first element or pattern 
is more general than or equal to a second or subsequent element or pattern. 

20 Claims, 132 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 104 
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□ 5. Document ID: US 6880086 B2 

L6: Entry 5 of 49 



File: USPT 



Apr 12, 2005 



US-PAT-NO: 6880086 

DOCUMENT- IDENTIFIER : US 6880086 B2 

TITLE: Signatures for facilitating hot upgrades of modular software components 
DATE-ISSUED: April 12, 2005 



INVENTOR-INFORMATION: 
NAME 

Kidder; Joseph D. 
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Hurley; Jim 



CITY 
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COUNTRY 



US-CL-CURRENT: 713 / 191 ; 713 / 177 , 713 / 200 



ABSTRACT: 

The present invention provides a method and apparatus for facilitating hot upgrades 
of software components within a telecommunications network device through the use 
of "signatures" generated by a signature generating program. After installation of 
a new software release within the network device, only those software components 
whose signatures do not match the signatures of corresponding and currently 
executing software components are upgraded. Signatures promote hot upgrades by 
identifying only those software components that need to be upgraded. Since 
signatures are automatically generated for each software component as part of 
putting together a new release a quick comparison of two signatures provides an 
accurate assurance that either the software component has changed or has not. Thus, 
signatures provide a quick, easy way to accurately determine the upgrade status of 
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25 Claims, 277 Drawing figures. 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 269 
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DATE-ISSUED: March 29, 2005 
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US-CL-CURRENT: 709 /217; 709 / 218 , 709 / 219 



ABSTRACT : 

In the disclosed information delivery scheme for delivering WWW information 
provided by information servers on the Internet to mobile computers connected to 
the Internet through a wireless network, a plurality of cache servers capable of 
caching WWW information provided by the information servers are provided in 
association with the wireless network. The cache servers can be managed by 
receiving a message indicating at least a connected location of a mobile computer 
in the wireless network from the mobile computer, selecting one or more cache 
servers located nearby the mobile computer according to the message, and 
controlling these one or more cache servers to cache selected WWW information 
selected for the mobile computer, so as to enable faster accesses to the selected 
WWW information by the mobile computer. Also, the cache servers can be managed by 
selecting one or more cache servers located within a geographic range defined for 
an information provider who provides WWW information from an information server, 
and controlling these one or more cache servers to cache selected WWW information 
selected for the information provider, so as to enable faster accesses to the 
selected WWW information by the mobile computer. 

9 Claims, 23 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 18 
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□ 7. Document ID: US 6868447 Bl 

L6: Entry 7 of 49 
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US-CL-CURRENT: 709/225; 719/315 



ABSTRACT : 



Systems and methods for returning results of services within a distributed 
computing environment are provided. After a client invokes one or more functions of 
a service, results of the function (s) may be returned to the client in a plurality 
of ways: for example, in a message, in a space (e.g., a network-addressable storage 
location^, in a space wherein the client is notified via an event, using an 
advertisement returned in a message, using an advertisement returned in a space, 
and using an advertisement returned in a space wherein the client is notified via 
an event. The advertisement may include the information necessary to access and 
read the results in a storage location such as a space. A schema for the service 
may specify a plurality of messages which are usable to invoke the function (s) of 
the service. The messages, results, and advertisements may be expressed in a 
platform-independent and/or programming-language-independent data representation 
language such as XML. The availability of these plurality of methods may enhance 
the flexibility and adaptability of the distributed computing environment for a 
variety of situations, such as for clients having differing capabilities. For 
additional flexibility, results may also be efficiently passed to another service. 

45 Claims, 64 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 45 
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US-CL-CURRENT: 709/223; 709/220 



ABSTRACT : 



A web hosting system comprises a plurality of geographically separate web hosting 
facilities with a plurality of servers located at each of the facilities having 
internet resources hosted thereon. A network accessible centralized database remote 
from at least some of the web hosting facilities contains information comprising 
one or more of server serial number, server model, server facility location, server 
location within a facility, server speed, server memory capacity, server traffic, 
and server software configuration for at least some of the servers. In some 
embodiments, different users are allowed to access different information in the 
database. 

26 Claims, 13 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 11 
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US-CL-CURRENT: 706/47; 706/45, 706/46 

.ABSTRACT: _ 

An approach is described for developing software that executes rules, such as 
business rules. A group of rule templates defines a rule structure for rules that 
may be executed by a rules engine. Separate ruleflow templates define tasks that 
entail the execution of rules. Each of the ruleflow templates associates a task 
with the group of rule templates. Because the ruleflow templates define the 
association between the tasks and the group of rule templates, during execution of 
the tasks a rules engine executes rules defined by the group of templates. User 
interfaces are automatically generated based on the group of rule templates. A user 
may interact with the user interfaces to edit the rules defined by the group of 
templates. After editing the rules, executing the tasks associated with the group 
of templates will cause execution of the modified rules. 

20 Claims, 11 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 11 
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US-CL-CURRENT: 707/10; 707/3 



ABSTRACT: 



A service discovery protocol may allow clients in a distributed computing 
environment to search for services using flexible search criteria. A client may 
send a search message that may be formatted in a data representational language and 
may include search criteria. The search criteria may specify a service name or a 
service type or both a service name and a service type. The search criteria may be 
compared to advertisements for services within the distributed computing 
environment to find advertisements that match the search criteria. An advertisement 
may be a document in the data representation language that provides access 
information for a corresponding service. The client may receive one or more search 
response messages indicating one or more advertisements that match the search 
criteria. The client may obtain and advertisement for a located service and may use 
the advertisement to construct a message gate to communicate with the service 
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36 Claims, 53 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 35 
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ABSTRACT : 



Embodiments of message gates are described. A message gate is the message endpoint 
for a client or service in a distributed computing environment. A message gate may 
provide a secure endpoint that sends and receives type-safe messages. Gates may 
perform the sending and receiving of messages between clients and services using a 
protocol specified in a service advertisement. In one embodiment, the messages are 
extensible Markup Language (XML) messages. For a client, a message gate represents 
the authority to use some or all of a service's capabilities. Each capability may 
be expressed in terms of a message that may be sent to the service. Creation of a 
message gate may involve an authentication service that generates an authentication 
credential, and that may negotiate the desired level of security and the set of 
messages that may be passed between client and service. A message gate may perform 
verification of messages against a message schema to ensure that the messages are 
allowed. Message gates may embed the authentication credential in outgoing messages 
so that the receiving message gate may authenticate the message. Messages may also 
include information to allow the receiving gate to verify that the message has not 
been compromised prior to receipt. 
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ABSTRACT: 



In a mobile satellite system, a system for providing satellite communication 
between multiple users in a closed user group arrangement includes first and second 
mobile earth terminals (METs) responsively connecter to and registering with the 
mobile satellite system. The first MET selects a closed user group network 
identifier (NET. ID) representing a NET group including the first and second METs 
to establish voice communication therewith and transmits the NET ID to a central 
controller. The central controller receives the NET ID from the first MET, 
validates the first MET for communication, validates the NET ID, allocates a 
frequency for the NET group, and broadcasts the message to the NET group including 
the second MET informing the NET group of the allocated frequency and the voice 
communication associated therewith. The second MET tunes to the frequency in 
response to the message broadcast by the central controller, and the central 
controller assigns the first MET as current speaker for the NET group. 
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ABSTRACT : 



An application independent method for monitoring file system requests made by any 
application program, storing changes made to a first copy of a selected file by the 
application program into a first file and synchronizing the selected file, whether 
the file is open or closed, with a second copy of the selected file. The monitoring 
and storing process is repeated each time a file system request to write into the 
selected file is made by the application program to track changes made to the 
selected file. At the time of synchronization, if the selected file is closed, all 
the changes that are stored in the first file are applied to a second copy of the 
selected file. If, however, the selected file is open, a portion of the changes are 
selected pursuant to a predetermined time period and applied to a second copy of 
the selected file. As a result, both copies of the selected files are identical, 
thereby synchronizing them. For open files, both copies of the selected file are 
identical up to the predetermined time period. 
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ABSTRACT : 



A system and method are provided^for interfacing a naming service and a client with 
the naming service allowing access to a plurality of different sets of services 
from a plurality of globally addressable interfaces. As a result of the calls, 
proxies are generated based on the received locations of the global addressable 
interfaces. The proxies are received in an allocation queue where the proxies are 
then allocated in a proxy pool, wherein an allocation thread runs on the allocation 
queue and makes calls to the naming service and the allocation queue replenishes 
the proxy pool with the proxies. Access to the proxies in the proxy pool is allowed 
for identifying the location of one of the global addressable interfaces in 
response to a request received from the client. 
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ABSTRACT : 

A network server runs a routine that is triggered by an external database 
management program. The routine receives configuration parameters from the 
database, and configures application programs resident on the server in- accordance 
therewith . 
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ABSTRACT : 

A broadband communication system including an Internet Protocol Telephony Network 
and public switched telephone network, including apparatus and methods for placing 
a call on hold in a way that significantly reduces the amount of network bandwidth 
utilized by the call while the call is on hold. When a call is placed on hold, 
embodiments of the architecture of the telephony network of the present invention 
allows the network to essentially "forget" about the call placed on hold. In other 
words, a call that is on hold may require very little, or even zero, bandwidth 
within the telephony network. Accordingly, the total necessary bandwidth capacity 
of the telephony network may be smaller than it would be if calls on hold were to 
consume precious network bandwidth as is found in existing telephony systems. 
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ABSTRACT : 

An information signal processing apparatus according to the present invention is 
arranged to receive, as an input, an information signal to temporarily store 
therein the input information signal and to temporarily store therein management 
information prepared during a recording of the information signal in the recording 
medium, thereby recording the temporarily stored information signal and management 
information in the recording medium. Accordingly, it is possible to record an 
information signal having a large amount of information in the recording medium 
without lowering a recording speed and it is also possible to easily reduce the 
size, weight and cost of the apparatus. 
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ABSTRACT : 

An apparatus and method is provided for transparent communication between a remote 
or mobile device and a fixed communication host network. The apparatus and method 
may include a remote network controller that logically resides between the host 
network and the existing infrastructure ( s ) that are used to provide communications 
network contact with one or more remote devices. The remote network controller is 
connected to the host communication network as a protocol-appropriate 
communications controller so that remote devices are indistinguishable to the host 
network from the locally-attached devices. Each remote device may be provided with 
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an asynchronous serial data interface to communicate with a mobile data controller. 
The mobile data controller, in combination with the remote network controller, 
provides end-to-end data communication such that incompatible protocols are 
transparent to the remote device and host communication network. A router may be 
provided which selects a communications network in accordance with user configured 
parameters. The router communicates over a plurality of incompatible networks and 
is capable of using a variety of different protocols. Switching between the 
plurality of incompatible networks is transparent to the remote device and host 
communication network. 
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ABSTRACT : 



A method of alerting a user of a variable bit rate communication between a first 
terminal and a distant terminal over alternative networks including a circuit 
switched network and a packet network permits the user the opportunity to change 
alerting preferences from a remote location or locally and to predetermine 
instructions for a calling party. A method of alerting a broadband user at a first 
terminal of an incoming multimedia call from a particular calling party comprises 
the steps of receiving input data at a broadband gateway of user preferences of 
calling parties, calling party locations, and terminal configuration data for a 
terminal normally utilized by the user, alerting a called user by utilizing a user- 
defined alerting scheme, the scheme including identifying the multimedia call as 
one specifically intended for the user among a plurality of different users and 
identifying one of the identity or the location of the calling party, comparing the 
identity or location with said user preferences and alerting the calling party of 
the priority of the call, the priority of the call including an indication of 
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whether the called party has left instructions for the calling party. In accordance 
with a further embodiment, a method of alerting a broadband user at a first 
terminal of an incoming multimedia call from a particular calling party comprises 
the steps of receiving input data at a broadband gateway of user preferences of 
calling parties, calling party locations, and terminal configuration data for a 
terminal normally utilized by the user, comparing the user preferences with data 
describing the incoming multimedia call, and, if the terminal normally utilized by 
the user is not appropriate for the call, alerting the called user to one of moving 
to another terminal or arranging to equip said terminal so that the terminal is 
appropriate for the call. 
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ABSTRACT : 

An Internet Protocol Telephony Network and public switched telephone network that 
allows one or more call waiting callers to dynamically join in an existing and to 
establish a multiple-party conference call including the call waiting call. A call 
waiting call may also be added to an existing conference call. 
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ABSTRACT : 



A computerized system offers a uniform platform for conducting electronic 
transactions in multiple different environments. The system includes a portable, 
multi-purpose, integrated circuit (IC) card and complimentary computer software 
which enables access and management of resources maintained on the IC card. The 
software runs on a user's personal computer, empowering the user to initialize the 
IC card, configure the card with the resources that the user wants to maintain on 
the card, and to manage those resources. The software enables the user to generate 
private/public key pairs and establish or change passcodes for access to the card 
resources. The IC card itself provides the electronic vehicle for securely 
transporting the user's private keys and certificates without exposing them in 
plaintext form. The IC card is designed with enough processing capabilities to 
perform rudimentary cryptographic functions so that the private keys may be 
employed for signing or encryption without ever being released from the card. 
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ABSTRACT : 

An administrative system provided with surveillance equipment, which is arranged in 
a plurality of locations on a patrol surveillance route, for (1) reading 
identification information stored in an information storage medium carried by 
surveillance staff, and (2) transmitting the identification information. The system 
is also provided with management devices for (1) receiving the identification 
information transmitted by the surveillance equipment and (2) storing the 
identification information in relation to identification information that 
identifies the surveillance equipment. 
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ABSTRACT : 

Techniques for distributing database functions in a system of database devices 
includes performing database management tasks for a database on a first device 
connected to a network. The first device is designated a database host. Data file 
storage and retrieval tasks for the database are sent to a second device connected 
to the network. The second device is designated an off -host storage device. 
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The first device may be a database server appliance, which includes a processor; a 
database server process, a special purpose operating system and non-volatile 
storage. The database server process persistently stores data files for the 
database on a second device connected to the database server appliance over a 
network. The special purpose operating system has features and configuration that 
are dictated by the database server and supporting components. The non-volatile 
storage is sufficiently large to store and execute instructions that cause the 
processor to perform as the database server process and the special purpose 
operating system and not sufficiently large to store all data files in the 
database . 

These techniques increase reliability of the database on the network by insulating 
database server processes from the storage system. These techniques also allow 
sharing of a high performance storage system among multiple database server 
appliances . 
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ABSTRACT : 



In a distributed computing environment, a message gate may be the message endpoint 
for a client or service to communicate with another client or service. Devices may 
have a gate factory (e.g. message endpoint constructor) that is trusted code on the 
device for generating gates based on XML message descriptions. The use of the gate 
factory may ensure that the gate it generates is also trusted code, and that the 
code is correct with respect to a service advertisement. A service advertisement 
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may indicate, for a particular service, a message schema, service URI and 
authentication service URI. In one embodiment, the pieces the gate factory needs to 
construct a gate are the XML schema of the service and the URI of the service. In 
another embodiment, an authentication credential may also be obtained and used in 
gate construction by running an authentication service specified in the service 
advertisement. A gate factory for a device may generate gate code that may 
incorporate the language, security, type safety, and/or execution environment 
characteristics of the local device platform. By constructing gates itself, a 
device has the ability to ensure that the generated gate code is relatively bug- 
free, produces only valid data, and provides type-safety. 

43 Claims, 53 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 34 



Cl3;; irkation 



□ 25. Document ID: US 6789126 Bl 

L6: Entry 25 of 49 



File: USPT 



Sep 7, 2004 



US-PAT-NO: 6789126 

DOCUMENT- IDENTIFIER : US 6789126 Bl 

TITLE: Addressing message gates in a distributed computing environment 
DATE-ISSUED: September 7, 2004 



INVENTOR- INFORMAT I ON : 
NAME 

Saulpaugh; Thomas E. 
Slaughter; Gregory L. 
Pouyoul; Eric 



CITY 

San Jose 
Palo Alto 
San Francisco 



STATE ZIP CODE 

CA 

CA 

CA 



COUNTRY 



US-CL-CURRENT : 709/245; 709/201, 709/206, 709/217, 709/227 
ABSTRACT : 

A message gate is the message endpoint for a client or service in a distributed 
computing environment. A message gate may provide a secure message endpoint that 
sends and receives type-safe messages. A gate may have a gate name that is a unique 
ID that refers only to the gate. In one embodiment, a gate is assigned a gate name 
when the gate is created and the gate name refers to only that gate for the life of 
the gate. A gate may be addressed using its gate name. The name may allow clients 
and services to migrate about the network and still work together. In a preferred 
embodiment, the gate address is independent of the physical message transport 
address and/or socket layer. Thus, a gate name may provide a virtual message 
endpoint address that may be bound and un-bound to a message transport address. 
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ABSTRACT : 

A network server manager includes a database of application program configuration 
parameters. The server manager additionally includes a dispatch module for routing 
configuration parameters to network servers so as to maintain synchronization 
between the database content and the configuration of the network servers. 
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ABSTRACT : 

A system and method for searching for Internet-based repositories within a 
distributed computing environment are provided. A client on a device may interact 
with a search service on the same or a different device to find spaces (i.e., 
network-accessible XML object repositories) for storage and/or retrieval of data. 
The client may send an XML search request to the search service. The search request 
may include one or more desired characteristics, such as keywords, which are sought 
of a space. Based upon the search request, the search service may generate search 
results including locations (e.g., URIs) of one or more resulting spaces. The 
spaces may include web pages. In generating the search results, the search service 
may interact with a network-accessible third-party search engine, such as a 
browser-accessible search engine. The search service may obtain a service 
advertisement for each of the resulting spaces. Each service advertisement includes 
information which is usable to access the respective space. The search service may 
send the search results, including the advertisements and/or URIs, to the client to 
enable the client to access the resulting spacees at their respective locations. 
The search service may store the search results in a results space and send the 
address of the results space to the client. 
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ABSTRACT : 

The invention provides improved methods and apparatus for control using field and 
control devices that provide a virtual machine environment and that communicate via 
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an IP network. By way of non- limiting example, such field device can be an 
"intelligent" transmitter or actuator that includes a low power processor, along 
with a random access memory, a read-only memory, FlashRAM, and a sensor interface. 
The processor can execute a real-time operating system, as well as a Java virtual 
machine (JVM) . Java byte code executes in the JVM to configure the field device to 
perform typical process control functions, e.g., for proportional integral 
derivative (PID) control and signal conditioning. Control networks can include a 
plurality of such field and control devices interconnected by an IP network, such 
as an Ethernet. 



7 Claims, 6 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets : 6 
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ABSTRACT : 

In a telecommunications network environment including non-participating elements 
and participating elements, a method for providing a telecommunications service 
between a first peer element connected to the telecommunications network 
environment and a second peer element connected to the telecommunications network. 
At a first peer element, an indication of the type of telecommunications service to 
be provided between the first peer element and the second peer element is received. 
A telecommunications service template in association with the indicated 
telecommunications service is determined, the telecommunications service template 
including instructions for configuring the non-participating elements of the 
telecommunications network environment to provide the indicated telecommunications 
service and instructions for configuring the participating elements of the 
telecommunications network environment. The telecommunications service template may 
further comprise routing instructions for the non-participating elements of the 
telecommunications network environment and routing instructions for the 
participating elements of the telecommunications network environment. The 
instructions to configure the participating elements and non-participating elements 
of the telecommunications network environment are executed to provide the 
telecommunications service. Data between the first peer element and the second peer 
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element is transmitted via a predefined transmission protocol indicated by the 
telecommunications service template, the data including the routing instructions 
for the non-participating elements of the telecommunications network environment in 
a header portion of the predefined transmission protocol and the routing 
instructions for the participating elements of the telecommunications network 
environment in a payload portion of the predefined transmission protocol. 
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ABSTRACT : 



Role is a comprehensive grouping mechanism. In a client-server directory system, 
roles transfer some of the complexity to the directory server. A role is defined by 
its role definition entry. Any client with appropriate access privileges can 
discover, identify and examine any role definition. A "managed" role is one that 
can be configured to provide search results similar to those available with a 
static grouping mechanism, i.e., to create a group entry that contains a list of 
members. Managed roles allow a user to create an explicit enumerated list of 
members. A managed role is a label stored with a directory entry. 

16 Claims, 24 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 12 
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ABSTRACT : 

An asymmetric network system manages bandwidth allocation and configuration of 
remote devices in a broadband network. A modular architecture of the system permits 
independent scalability of upstream and downstream capacity separately for each of 
the upstream and downstream physical paths. Allocation of downstream bandwidth to 
requesting devices is made according to bandwidth utilization by other devices, 
bandwidth demand by the requesting remote device, class or grade of service by the 
requesting remote device or bandwidth guaranteed to other remote devices . 
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ABSTRACT : 

In a telecommunications switching network having a resource complex including 
network switches, an intelligent service platform for providing intelligent call 
processing and service execution for call events received at the switches and 
requiring call processing services. A centralized administration system is provided 
that comprises a system for storing one or more reusable business objects that each 
encapsulate a distinct call processing function, and any associated data required 
by the business object; a system for distributing selected business objects and 
associated data to selected nodes in the switching network based on pre-determined 
node configuration criteria; and, a system for activating the business objects in 
preparation for real-time use. A computing platform is provided within each node 
for executing those business objects required to perform a service in accordance 
with an event received at the network switch. Also within a node is a storage and 
retrieval system for sorting and retrieving selected objects and any associated 
data distributed by the administration system, and making them locally available to 
the computing platform when required to perform a service. An underlying location- 
independent communication system is provided to coordinate interaction of one or 
more business objects to perform the service in response to needs of the received 
event . 
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ABSTRACT : 



The present invention provides a virtual network, sitting "above" the physical 
connectivity and thereby providing the administrative controls necessary to link 
various communication devices via an Access-Method-Independent Exchange. In this 
sense, the Access-Method-Independent Exchange can be viewed as providing the 
logical connectivity required. In accordance with the present invention, 
connectivity is provided by a series of communication primitives designed to work 
with each of the specific communication devices in use. As new communication 
devices are developed, primitives can be added to the Access-Method-Independent 
Exchange to support these new devices without changing the application source code. 
A Thread Communication Service is provided, along with a Binding Service to link 
Communication Points. A Thread Directory Service is available, as well as a Broker 
Service and a Thread Communication Switching Service. Intraprocess, as well as 
Interprocess, services are available. Dynamic Configuration Management and a 
Configurable Application Program Service provide software which can be 
commoditized, as well as upgraded while in operation. 
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ABSTRACT : 

The present invention is directed to a method of building a custom software 
configuration, which may include receiving a first customer order for a first 
information handling system and a second customer order for a second information 
handling system. The first customer order including a first list of hardware 
configuration components and a first list of software configuration components and 
the second customer order including second list of hardware configuration 
components and a second list of software configuration components. At least one of 
the first list of hardware configuration components is different from the second 
list of hardware configuration components and the first list of software 
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configuration components is different from the second list of software 
configuration components. At least one software configuration is stored on a 
removable medium, the at least one software configuration suitable for loading at 
least one of the first list of software configuration components and the second 
list of software configuration components onto at least one of the first 
information handling system and the second information handling system. 
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ABSTRACT : 



The present invention includes a number of systems and techniques for service 
control for a broadband communications system that includes voice, data and 
multimedia audio and video communication. One variation of the present invention 
includes service control based on multiple relationships between equipment specific 
unique media access control (MAC) addresses, system addresses and directory numbers 
to enable the properly route traffic between the broadband communication system and 
legacy telephone systems. In this case, one server, for example a dynamic host 
control protocof (DHCP) server is used to assign system addresses to equipment 
unique MAC addresses and another server, for example a call manager (CM) server is 
used to assign directory numbers to the system addresses. Another variation of the 
present invention includes service control based on multiple relationships between 
equipment specific unique media access control (MAC) addresses and directory 
numbers (DNs) to enable the properly route traffic between the broadband 
communication system and legacy telephone systems. In this case the DHCP server is 
not needed to assign system addresses to MAC addresses. 
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ABSTRACT: 

A method of billing a variable bit rate communication between a first terminal and 
a distant terminal to a broadband subscriber permits changing billing parameters 
during a call in real time in response to user inputs including user requested 
changes in quality of service, changes in data rate and changes in preferred 
service provider. A variable bit rate communication to be billed has a variable 
quality of service related to the degree of utilization of a plurality of different 
networks. The billing method comprises the steps of: i.) receiving user 
identification data at a first terminal and data representing a required bit rate 
and a default quality of service selected by the user, ii.) verifying the user 
identification data to be associated with the broadband service subscriber, iii.) 
determining least cost alternative network resources available for achieving the 
communication at the user selected default quality of service and the required bit 
rate, iv.) determining cost data associated with the network resources, v.) 
outputting to the user a least cost for the communication according to their 
selected default quality of service and alternative least cost network resources, 
vi . ) coupling the first terminal and the distant terminal via the least cost 
determined network resources at the default quality of service and the required bit 
rate responsive to user authorization and vii.) billing for the communication at 
the default quality of service and according to the required bit rate after the 
termination of the communication. 
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Exemplary Claim Number: 1 
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ABSTRACT : 



Several types of roles are disclosed herein. The difference between the role types 
relates to their capabilities, which in turn derive from how they are implemented. 
When a client application whishes to identify all entries with some characteristic, 
e.g., everyone who is a manager and works in a designated building, a filtered 
role, which uses an LDAP filter in order to search a designated portion of the 
directory system and to identify those entries that possess the characteristics 
described in filter, is used. 
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ABSTRACT : 

The present invention enables a party which is placed on hold in a first 
communication session to enter a second communication session and continue to 
monitor the status of the first communication. For example, in a broadband 
communication system telephone call or multimedia call, two parties may be in an 
active communication session with one another and a first of the two parties to the 
call may receive another incoming call. The first party then places the second 
party on hold. At this time the second party may wish to place the communication 
session with the first party on hold to initiate another communication session with 
a third party. However, the second party would also like to know when the first 
party takes the communication session off hold so that they can resume their 
communication. As a result, the second party places the communication on "monitor" 
hold. While the communication is on monitor hold, the second party is able to 
monitor the on hold communication session to recognize when the first party 
returns. For example, the monitored call on hold may be maintained at a reduced 
volume or a video display of the video in a multimedia communication session may be 
displayed in a reduced window size on a display. Further, the present invention 
provides prompts to various parties of a communication session when one or more 
parties to the communication session are placed on hold or taken off hold. For 
example, the system may generate a prompt to one or more parties when a 
communication session is placed on hold or monitor hold, or when a communication 
session on hold or monitor hold is taken off hold. 
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ABSTRACT : 
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Systems and methods of providing mobile network management of assets on a network 
are presented. In accordance with the method, a network management server is 
provided to control a network asset on a network. The network asset is connected to 
the network management server via a connection path. A secure communication path is 
established between the network management server and a mobile wireless capable 
device. The network asset is managed via the secure communication path with the 
mobile wireless capable device. The network is administered via the secure 
communication path with the mobile wireless capable device . 
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ABSTRACT : 

Measuring the reliability of a version of a software module in a customized manner 
that is independent of the written language used by versions of the software module 
to output objects. Language independent state tables may be generated from one 
version of a software module and then used to facilitate measuring the reliability 
of other versions of the software module. During the testing process, standardized 
pointers are used to reference objects that are common to a plurality of versions 
of a software module. Parameters representative of an actual state of a software 
module are compared to parameters representative of an anticipated state of the 
software module to determine if an action has performed as intended. Customized 
functions may be automatically loaded during the testing process and may receive 
data standardized for use with a plurality of version of a software module via 
common function headers. 
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ABSTRACT : 



A high density network access server implements a tunneling protocol between a 
modem module and a route server module. PPP and routing control packets received 
from the PPP link are tunneled to the route server for processing. The IP data 
packet forwarding function for the network access server is distributed directly to 
the modem modules. The combination of distributed PPP processing and distributed IP 
data packet forwarding enables the capacity of the network access server to be 
scaled to orders of magnitude greater than previously known, to handle thousands or 
even tens of thousands of simultaneous data sessions. 
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ABSTRACT : 



A method, system, and computer program product that provides voice over the 
Internet communication. A Voice over the Internet (VoIP) system includes a gateway 
server that handles calls received from a public switched telephone network and a 
packet-switched network, a routing server, and a database server. Messages can be 
sent between the gateway server, routing server, and database server over the 
packet-switched network. A provisioning system is coupled to the database server. A 
management system is also coupled to the gateway server, routing server, database 
server, and management system over the packet-switched network. A network manager 
automatically queries a client database to determine an update, and sends a message 
representative of the update to at least one of the gateway server, routing server, 
database server, and management system over the packet-switched network. A 
licensing server supports licensing of the VoIP system. 
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ABSTRACT : 



Configuration of an embedded network device is described. The configuration 
technique described can is accomplished by a single process in order to provide a 
complete and consistent configuration . Various tests are performed including 
heuristic checks that check for common configuration errors. Other hardware and 
software tests are also performed. In one embodiment, the embedded network device 
includes an operating system kernel stored in memory and executed by a processor. 
During configuration, extensions to the operating system as well as application- 
level upgrades can be provided. 
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ABSTRACT : 



A method apparatus and computer program product for providing access to host 
attribute information in a storage area network is disclosed. The storage area 
network is composed of a plurality of hosts coupled to at least one initiator. Each 
initiator is coupled to one or more targets and each initiator has an associated 
identifier. In each host, the identifier of the initiator is related to other host 
attribute information. The identifier may be, for example, a world wide name. The 
host attribute information including the identifier is sent from each of the 
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plurality of hosts to the one or more targets and stored in memory of an associated 
storage array. Either a host or requestor remote from the storage array may request 
the collected host attribute information from the storage array. A topology of the 
storage area network may then be formed from the host attribute information of each 
host. 
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ABSTRACT : 

A technique is disclosed which makes it possible to easily control access to 
personal information of a user. A management server stores personal information 
such as a name, telephone number, address, and electronic mail address of each 
user. For example, if a user of a computer transmits a request command to the 
management server to transmit personal information of a user of a portable 
telephone device, the management server determines, in accordance with access 
restriction information, whether or not providing of the personal information of 
the user of the portable telephone is restricted. If the providing of the personal 
information requested by the user of the computer is restricted, the management 
server inquires of the user of the portable telephone device, who is the owner of 
the personal information, whether to give permission to provide the personal 
information. If permission is given, the management server provides the personal 
information to the user of the computer. 



23 Claims, 28 Drawing figures 
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ABSTRACT : 



A gateway for communicating telecommunication information between a 
telecommunication network and customer premises equipment, includes a 
telecommunication interface, a management module, compression modules, and 
packetization modules. The telecommunication interface receives telecommunication 
information from the telecommunication network for communication to the customer 
premises equipment. The management module determines a bandwidth available to 
communicate the telecommunication information to the customer premises equipment 
and selects a compression algorithm according to the available bandwidth. The 
compression modules compress the telecommunication information using the selected 
compression algorithm, and the packetization modules generate data packets for 
communicating the telecommunication information. 

23 Claims, 10 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets : 8 
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ABSTRACT : 



Telephone calls, data and other multimedia information is routed through a hybrid 
network which includes transfer of information across the internet utilizing 
telephony routing information and internet protocol address information. A media 
order entry captures complete user profile information for a user. This profile 
information is utilized by the system throughout the media experience for routing, 
billing, monitoring, reporting and other media control functions. Users can manage 
more aspects of a network than previously possible, and control network activities 
from a central site. A directory service that supports a hybrid communication 
system architecture is provided for routing traffic over the hybrid network and the 
internet. 

12 Claims, 191 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 133 
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ABSTRACT : 



The present invention provides a system and apparatus for efficient and reliable, 
control and distribution of data files or portions of files, applications, or other 
data objects in large-scale distributed networks. A unique content -management 
front-end provides efficient controls for triggering distribution of digitized data 
content to selected groups of a large number of remote computer servers. Network 
distribution messages are dispatched according to a sorted list of servers, based 
on factors such as nearness, server processor speed, reliability, and CPU Usage. 
For large numbers of servers, a store-and- forward approach becomes much more 
efficient. A first selected server receives the message from a content control 
manager (CCM) . The first server requests instructions for the next server listed on 
an ordered list in the CCM and forwards a copy of that message to the next 
identified server. Each server reports its completion and requests further 
instructions from the CCM. This mechanism permits highly efficient and robust 
distribution of assignments and data content from the CCM to each required GL using 
a store-and- forward tree structure. 

21 Claims, 8 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 7 
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ABSTRACT : 



A system and methods for the dynamic generation of playlists to a user are 
provided. In connection with a system that convergently merges perceptual and 
digital signal processing analysis of media entities for purposes of classifying 
the media entities, various means are provided to a user for automatically 
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generating playlists of closely related and/or similarly situated media entities 
for distribution to participating users. Techniques for providing a dynamic 
recommendation engine and techniques for rating media entities are also included. 
In an illustrative implementation, the playlists may be generated and stored 
allowing for user persistence from experience to experience. 

24 Claims, 5 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 5 
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